Rémi Bouteiller 2ec7510814 fix(security): enforce tenant ownership in runtime paths ...

Scope tenant-sensitive actions and device endpoints through the current owner so RLS policies cannot be bypassed by raw reads, MAC fallback, or unowned device creation.

Made-with: Cursor

2026-04-26 12:01:20 -07:00

..

auth/[...all]

Update authentication logic to conditionally enable or disable based on environment variable. Refactor auth handling in various components and routes to improve clarity and maintainability. Add error handling for disabled auth scenarios.

2026-01-28 10:51:05 +01:00

bitmap

fix(security): enforce tenant ownership in runtime paths

2026-04-26 12:01:20 -07:00

categories

feat(api): serve TRMNL registry endpoints from local cache

2026-04-26 09:17:48 -07:00

devices

Fix linting

2026-01-27 16:53:28 +01:00

display

fix(security): enforce tenant ownership in runtime paths

2026-04-26 12:01:20 -07:00

ips

feat(api): serve TRMNL registry endpoints from local cache

2026-04-26 09:17:48 -07:00

log

fix(security): enforce tenant ownership in runtime paths

2026-04-26 12:01:20 -07:00

markup

feat(api): render /api/markup locally with liquidjs

2026-04-26 09:17:54 -07:00

me

Fix api endpoint and biome

2025-12-22 17:55:03 +01:00

models

feat(api): serve TRMNL registry endpoints from local cache

2026-04-26 09:17:48 -07:00

palettes

feat(api): serve TRMNL registry endpoints from local cache

2026-04-26 09:17:48 -07:00

playlists/items

fix(security): enforce tenant ownership in runtime paths

2026-04-26 12:01:20 -07:00

plugin_settings

Fix linting

2026-01-27 16:53:28 +01:00

setup

fix(security): enforce tenant ownership in runtime paths

2026-04-26 12:01:20 -07:00

test-img/[[...slug]]

Fix lint issues surfaced after lib upgrades.

2026-04-24 13:33:26 -07:00